The msi the customer downloads via the Download document routing agent setup link in D365 contains partially signed assemblies.
We are working on a hotfix now for this issue.
We do have an official fully signed version of the MSI available. It is saved as an attachment to this bug.
The MSI was created by the official RTM build for Platform Update 7 and all assemblies are appropriately signed.